CVE-2020-25753: Critical severity enphase envoy vulnerability

Published Jun 16, 2021

Updated

An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software. The default admin password is set to the last 6 digits of the serial number. The serial number can be retrieved by an unauthenticated user at /info.xml.

Affected Software

3 affected components

Enphase Envoy Firmware=d4.0

Enphase Envoy Firmware=r3.0

Enphase Envoy

Event History

Jun 16, 2021

CVE Published

via MITRE·06:26 PM

Data Sourced

via MITRE·06:26 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-25753?

CVE-2020-25753 is considered a critical vulnerability due to the use of a predictable default admin password.

How do I fix CVE-2020-25753?

To fix CVE-2020-25753, update the firmware of your Enphase Envoy devices to a version that has addressed this vulnerability.

What devices are affected by CVE-2020-25753?

CVE-2020-25753 affects Enphase Envoy R3.x and D4.x devices running version 3 software.

How can an attacker exploit CVE-2020-25753?

An attacker can exploit CVE-2020-25753 by accessing the serial number via /info.xml, which is publicly accessible, and then using it to obtain the default admin password.

Is there a workaround for CVE-2020-25753?

A temporary workaround for CVE-2020-25753 is to change the default admin password to a strong, unique password immediately.